well running as a standard user and then having to put in local admin or domain admin credentials to do anything administrative is what we are looking for isn't it?

Running in Unix as a normal user and then running sudo or as root, same thing?